Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“You have to sign contracts with tax advisors.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3101352376

Proof data

Record hash (SHA-256)

a4829237f4f2dd3deac3eb0d4b2ac458042206d3fc8a69b5b2345825550ff0aa

Signature (Ed25519, base64)

DU8KRd6WfPI+q1nelxXA0XQ6VpReD1C5x5lZdO9OY2NpwJSAEOzoBnWLtTNUC8xsyfSN/g81o3i0wpYNpDh6BQ==

Merkle root

3b3dd30c58213ddb8f8368232793fe0b07c54689d13df1c0c41d21cb861abb8a

Merkle path

["a482caa240bc88c63588aadef065fcfb513eee94eabf8d6fccefe70e332569b0","b7618dd58be787ef67f23b694c95be0a149c6be9e9abf5a738814bd1419e7615","4b7a5aed621cdb03543acdbff6a185198c4af68ee5c93feae694efdaebf672fe","1a0a46486787b55c46f106b6afc8efc0ebf0b9b7aa7de7136c5b27e617c12244","faf2134828a108b500114dfc2c4f24a3af84d95509a021664b23e68fa23298a0","34a254ed60e339ab4262980118e833bebf5afe9191a16aa850654010605723b8","999d1da975cd2cb1f4a23549fdee2261009884628015d00d2fe85b3a3c85ae82","25327bdb717e8a6a3deba1072cc720384e7629cde3873b35ed180e0b0e2af02b","add3e4db3915d9410dabd1ab9274df2f2f1399f8d759f87090b329fb93975252","e5f4e5b6758ce21a90c29d446af14a703946a83bf2970719793f2bac1323dea8","5dbedf03bb5c5c87231a9e77ad5132e3fd2d02b1882116f8431f839865dad42a","1f4e854e61f1fe1c6a7b57c81aef1d1da6039c5524bd0ee48a47ab034ff8e316","7f5bbdcb2c84f70a72b9aeeb274d3c3cc2bf5fac382e79716e4d20af15e2d33c","c5fb59ddb423b19a23db98e9fce38dd74b7b258fd40fcce0768461acc03be638","47305652d37a3ceeb109b72531629a422fe2cf2dd06172d6774d59c822521a0c"]

Anchored

2026-10-06

Public log entry

search.sigstore.dev, log index 3101352376 · entry 108e9186e8c5677ae91e…

Expected log hash

0a3f75a20ca5e11e6fd9d7b6a5afa175a84aab197fa1914018652863a1a64cee The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791258637050","kind":"published-quote","locale":"en","page":"subtheme:zasta/service/misleading-ads/en","quote":"You have to sign contracts with tax advisors.","rating":1,"review_date":"2026-07-20","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.zasta.app","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3b3dd30c5821…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.